Remarks 

The above Amendments and these Remarks are in reply to the Office Action mailed September 25, 
2002. No fee is due for the addition of new claims. Claim 1 was pending in the Application prior to the 
outstanding Office Action. In the Office Action, the Examiner rejected claim 1 under 35 U.S.C. 103(a) as 
being upatentable over Quinlan, et al., U.S. Patent No. 6,397,253, in view of Wagner, U.S. Patent No. 
6,085,224, and in further view of McGee, U.S. Patent No. 6,393,468. The present Response amends claim 
1 and adds claims 2-14, leaving for the Examinees present consideration claims 1-14. Reconsideration of the 
rejections and consideration of the newly added claims is respectfully requested. 

I. Examiner Interview 

Repres entative for Applicants conducted a phone interview with Examiner Cesar B. Paula on 
November 26, 2002. During that interview, amended claim 1 and newly added claim 2 were discussed. 
Examiner stated that, upon a cursory review by the Examiner, the references do not appear to show the 
recited limitations of the claims. 

II. Objection to the claim 

Claim 1 was objected to due to a typographical error. Claim 1 has been amended to correct the 
simple typographical error. Applicants therefore respectfully submit that the objection has been overcome. 

III. Rejection under 35 USC §112 

Claim 1 is rejected under 35 U.S.C. § 1 12, second paragraph, as lacking sufficient antecedent basis 
for the limitation "response header." Claim 1 has been amended to clarify that which is being claimed, and 
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should not lack sufficient antecedent basis. Applicants therefore respectfully request that the rejection with 
respect to claim 1 be withdrawn. 

IV. Rejection under 35 USC §103 

Claim 1 is rejected under 35 U.S.C. § 103(a) as being obvious over Quinlan in view of Wagner, and 
further in view of McGee. 

A. Quinlan - Applicants respectfully disagree with the Examiner's reading of Quinlan. Quinlan is 
directed to a gateway component that runs on a client machine, that sets up and manages a persistent 
connection with a server through the Internet. (Col. 5, lines 15-56; col. 7, lines 17-25; Figure 1). It is this 
management approach that allows for the avoidance of "unnecessary scanning operations for detecting 
'cookies'" (col 7, lines 26-36). Nowhere does Quinlan disclose the management of cookies. In fact, one of 
the advantages of the management approach of Quinlan is that a user does not have to detect and manage 
cookies (col 7, lines 26-36). Quinlan does not teach "stripping off any cookies set by an external web site 
from the response header of the response Web page." 

Quinlan also does not teach or suggest "sending the modified response page, with the new header, 
to the client". First, Quinlan does not teach modifying a response page with a new header. Second, as 
discussed above, Quinlan does not teach "sending the modifies response page" to the client, as the gateway 
component is installed on the client and not on the server. 

B. Wagner - Wagner does not make up for the deficiencies in Quinlan. Claim 1 has been amended 
to recite "stripping off any cookies set by an external web site from the response header of the response Web 
page and storing the cookies in a repository." Wagner does not disclose such a limitation, as Wagner only 
teaches detecting and deleting cookie data from the HTTP header of an incoming request before it is passed 
to the browser and stored in cache (col. 2, lines 61-65). Detected cookies are logged such that a user can 
view what was deleted and, if the user wants the deleted material, can "modify the configuration data" and 
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"cause the bro.wser to request the page from the server again" (col 5., lines 1 8-38). Wagner does not teach 
or suggest "storing the cookies in a repository" on behalf of the client for a session id. As such, Quinlan and 
Wagner cannot render claim 1 obvious, either alone or in combination. 

C. McGee - McGee also fails to make up for the deficiencies in Quinlan and Wagner. Applicants 
respectfully disagree with the Examiner's reading of McGee. McGee does not disclose the appending to 
session id to all the URLs embedded in a Web page. McGee instead teaches in the cited sections that access 
can be controlled to resources by not providing a client with a URL, but instead providing a token for items 
that can be validly accessed by a user (col. 4, lines 14-18; col. 10, lines 34-67; col. 1 1, lines 56-67). McGee 
in fact teaches away from appending a session id to a URL embedded in a Web page, as the user could still 
determine the location of the resource. "An advantage of this aspect of the invention is that the client is not 
provided with the actual reference information, such as a URL" (col. 4, lines 14-18). As such, McGee cannot 
make up for the deficiencies in Quinlan and Wagner with respect to claim 1 . As none of the references teach 
or suggest the elements of claim 1, either alone or in combination, claim 1 cannot be rendered obvious by 
Quinlan in view of Wagner and McGee. Applicants therefore respectfully request that the rejection with 
respect to claim 1 be withdrawn. 

V. Newly Added Claims 

Claims 2-14 have been added to more particularly point out and distinctly claim the subject matter 
which Applicants regard as the invention. These claims are supported by the specification and do not add 
new matter to the disclosure. Applicants respectfully request that the new claims be considered. 
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VI. Amendments to the Claims 

Claim 1 has been amended in order to clearly and particularly point out and distinctly claim that 
which is regarded as the invention of claim 1 . The amendment is not intended to alter the scope of the claim 
or in any way limit any equivalence thereof. 

VII. Amendments to the Specification 

Amendments to the specification were made to correct simple typographic errors, and do not add any 
new matter to the specification. 

VIII. Conclusion 

In light of the above, it is respectfully submitted that all of the claims now pending in the subject 
patent application should be allowable, and a Notice of Allowance is requested. The Examiner is respectfully 
requested to telephone the undersigned if he can assist in any way in expediting issuance of a patent. 

The Commissioner is authorized to charge any underpayment or credit any overpayment to Deposit 
Account No. 06-1325 for any matter in connection with this response, including any fee for extension of 
time, which may be required. 



Respectfully submitted, 




By: 




FLIESLER DUBB MEYER & LOVEJOY LLP 
Four Embarcadero Center, Fourth Floor 
San Francisco, California 941 1 1-4156 
Telephone: (415) 362-3800 
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APPENDIX 



In the Specification : 

Page 2, beginning at line 1 1 : 

When a new session is started, a unique session id can be generated. Within the same session, all 
embedded links in the response page can then be stamped with the same session id. A sessioned request is 
defined as a request that has session id information in addition to the request itself. The proxy server can 
relate a sessioned request to a session via the session id. The session continues as long as the user stays in 
the links of the first page or pages generated from links in the first page. A session expires when its age 
reaches the lifetime set by the server. The session lifetime can be configurable through a configuration 
parameter. Due to the dynamic nature of the session, users do not have to log into the proxy server that 
provides centralized cookie handling services. The same [Same] user can start multiple sessions at the same 
time. 

Please replace the paragraph beginning at page 3 line 10, as shown below. 

In one embodiment, when a sessioned request is received, the proxy first retrieves and [stripes] strips 
off the session id from the request URL. The session id and the URL are then used to retrieve the cookies 
from the cookie repository. The proxy then uses the cookies retrieved to generate a cookie header. The new 
cookie header is then appended to the original request header. The session information is removed from the 
URL. The request is then sent to the external web site to fetch the page. After receiving the page from the 
external web site, the same procedure as that of handling a fresh request is used to process the header and 
the page. 
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In the Claims :* 

1 . (Once Amended) A method to handle cookies in a response Web page requested by a client , the response 
Web page having a response header, the method comprising [the steps of]: 

generating a session id to identify a new session; 

[striping] stripping off any cookies set by an external web site from the response header of the 
response Web page and storing the cookies in a repository : 

appending the session id to all of the links embedded in the response page; and 
sending the modified response page, with the new header, to the client. 

2. (New) A method for handling cookies for a client browser, comprising: 

generating a unique session id in response to a request from a client browser; 
removing any cookies from a response page for the request and storing the information in a cookie 
repository; and 

a ppending unique session id to any URL in the response page before sending the response page to 
the client browser. 

3. (New) A method according to claim 2, further comprising: 

determining whether the client browser can accept cookies. 

4. (New) A method according to claim 2, further comprising: 

encrypting the session id. 

5. (New) A method according to claim 2, further comprising: 

checking the request for an existing session id before generating a unique session id. 
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6. (New) A method according to claim 5. further comprising: 

retrieving a cookie from the cookie repository corresponding to the existing session id. 

7. (New) A method according to claim 6, further comprising: 

generating a cookie header corresponding to the retrieved cookie. 

8. (New) A method according to clam 7, further comprising: 

appending the cookie header to the request. 

9. (New) A method according to claim 2. further comprising: 

sending the request to an external Web site corresponding to the request. 

10. (New) A method according to claim 2, further comprising: 

setting a lifetime for the unique session id. 

1 1 . (New) A method according to claim 9, further comprising: 

dropping the information from the cookie repository when the lifetime expires. 

12. (New) A method according to claim 2, further comprising: 

determining whether the client browser has disabled cookies. 

13. (New) A method according to claim 2, further comprising: 

receiving the request from the client browser to a proxy server, the proxy server hosting the cookie 
repository. 
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14. (New) A ro^thod for storing information for a client comprising: 

removing information from a document and storing that information in a repository on a proxy 

server; 

appending an identifier to any link in the document and sending that document to the client, the 
identifier identifying the information being stored in the repository for the client. 
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